Lucene search
K

2306 matches found

CNVD
CNVD
added 2017/02/09 12:0 a.m.2 views

IBM UrbanCode Deploy Security Bypass Vulnerability (CNVD-2017-01414)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

7.5CVSS6.6AI score0.00818EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/08 12:0 a.m.1 views

IBM UrbanCode Deploy Local Information Disclosure Vulnerability

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

5.5CVSS6.2AI score0.00354EPSS
Exploits0References1
CNVD
CNVD
added 2017/02/08 12:0 a.m.1 views

IBM UrbanCode Deploy Security Bypass Vulnerability (CNVD-2017-01324)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

4.3CVSS6.6AI score0.0059EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2017/02/03 12:0 a.m.12 views

IBM UrbanCode Deploy Detection (HTTP)

Detection of IBM UrbanCode Deploy. The script sends a HTTP connection request to the server and attempts to detect the presence of IBM UrbanCode Deploy and to extract its version. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

6.9AI score
Exploits0References1
OpenVAS
OpenVAS
added 2017/02/03 12:0 a.m.45 views

IBM UrbanCode Deploy Multiple Vulnerabilities

IBM UrbanCode Deploy is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:ibm:urbancodedeploy"; ...

10CVSS6AI score0.02824EPSS
Exploits0References6
OSV
OSV
added 2017/02/01 10:59 p.m.2 views

CVE-2016-9008

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

7.5CVSS5.8AI score0.01023EPSS
Exploits0References2
NVD
NVD
added 2017/02/01 10:59 p.m.16 views

CVE-2016-9008

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

7.5CVSS7.4AI score0.01023EPSS
Exploits0References2
OSV
OSV
added 2017/02/01 10:59 p.m.4 views

CVE-2016-0320

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

4.3CVSS5.8AI score0.0059EPSS
Exploits0References2
OSV
OSV
added 2017/02/01 10:59 p.m.3 views

CVE-2016-6068

IBM UrbanCode Deploy could allow an authenticated user with access to the REST endpoints to access API and CLI getResource secured role properties...

7.5CVSS5.8AI score0.01369EPSS
Exploits0References2
OSV
OSV
added 2017/02/01 10:59 p.m.3 views

CVE-2016-2942

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

7.5CVSS5.8AI score0.00818EPSS
Exploits0References2
Prion
Prion
added 2017/02/01 10:59 p.m.14 views

Design/Logic Flaw

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

10CVSS7.3AI score0.02824EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.15 views

Code injection

IBM UrbanCode Deploy could allow a malicious user to access the Agent Relay ActiveMQ Broker JMX interface and run plugins on the agent...

5CVSS6.8AI score0.01023EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.19 views

Design/Logic Flaw

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

4CVSS6.6AI score0.0059EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2017/02/01 10:59 p.m.20 views

Code injection

IBM UrbanCode Deploy could allow an authenticated attacker with special permissions to craft a script on the server in a way that will cause processes to run on a remote UCD agent machine...

6CVSS6.6AI score0.00818EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/02/01 10:59 p.m.2 views

CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

10CVSS5.9AI score
Exploits0References2
OSV
OSV
added 2017/02/01 10:59 p.m.1 views

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

5.5CVSS5.8AI score0.00354EPSS
Exploits0References2
Prion
Prion
added 2017/02/01 10:59 p.m.14 views

Code injection

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

2.1CVSS6.3AI score0.00354EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2017/02/01 10:59 p.m.24 views

CVE-2016-0320

IBM UrbanCode Deploy could allow an authenticated user to modify Ucd objects due to multiple REST endpoints not properly authorizing users editing UCD objects. This could affect the behavior of legitimately triggered processes...

4.3CVSS4.5AI score0.0059EPSS
Exploits0References2
NVD
NVD
added 2017/02/01 10:59 p.m.11 views

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

5.5CVSS5.2AI score0.00354EPSS
Exploits0References2
NVD
NVD
added 2017/02/01 10:59 p.m.19 views

CVE-2016-8938

IBM UrbanCode Deploy could allow a user to execute code using a specially crafted file upload that would replace code on the server. This code could be executed on the UCD agent machines that host customer's production applications...

10CVSS9.5AI score0.02824EPSS
Exploits0References2
Rows per page
Query Builder